trustedsec/unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

3,888
PythonOther
Stars

3,888

Updated

Nov 25, 2025

Stars Over Time

Top Contributors

Related Repositories

Track developers from trustedsec/unicorn

Join 1,000+ companies finding quality developer leads